🇺🇸
TPI-Abuse
2026-11-11 15:53:23
UTC ·
(20 hours ago)
(mod_security) mod_security (id:210350) triggered by 45.132.187.53 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 10:53:15.124423 2026] [security2:error] [pid 10769:tid 10778] [client 45.132.187.53:41413] M ...
show more
(mod_security) mod_security (id:210350) triggered by 45.132.187.53 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 10:53:15.124423 2026] [security2:error] [pid 10769:tid 10778] [client 45.132.187.53:41413] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||baronlongford.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "baronlongford.com"] [uri "/Commissioners-of-the-Peace.html"] [unique_id "avSPaz2j0Cud-_NGfduAbwAAAUY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-03 03:17:07
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 45.132.187.53 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 22:17:03.885262 2026] [security2:error] [pid 1808:tid 1808] [client 45.132.187.53:60959] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 45.132.187.53 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 22:17:03.885262 2026] [security2:error] [pid 1808:tid 1808] [client 45.132.187.53:60959] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cosplayculture.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cosplayculture.com"] [uri "/2017/10/02/what-to-get-a-cosplayer-for-christmas/"] [unique_id "aulSL5MqcPeLejLXWVNBrAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-03 01:27:01
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 45.132.187.53 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 20:26:53.976197 2026] [security2:error] [pid 6507:tid 6507] [client 45.132.187.53:31051] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 45.132.187.53 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 20:26:53.976197 2026] [security2:error] [pid 6507:tid 6507] [client 45.132.187.53:31051] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||compassionfatigue.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "compassionfatigue.org"] [uri "/2/archives/03-2022"] [unique_id "auk4XUbXdxXjarcAZ2BDTgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-03 00:39:40
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 45.132.187.53 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 19:39:34.251396 2026] [security2:error] [pid 15119:tid 15119] [client 45.132.187.53:10503] M ...
show more
(mod_security) mod_security (id:210350) triggered by 45.132.187.53 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 19:39:34.251396 2026] [security2:error] [pid 15119:tid 15119] [client 45.132.187.53:10503] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||campnecon.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "campnecon.com"] [uri "/campnecon-42/registration-for-camp-necon-42-now-open-at-early-bird-special-rate/"] [unique_id "auktRhotVmuvnq7M2IU8rgAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-28 03:39:16
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 45.132.187.53 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 23:39:08.761170 2026] [security2:error] [pid 20831:tid 20831] [client 45.132.187.53:19903] M ...
show more
(mod_security) mod_security (id:210350) triggered by 45.132.187.53 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 23:39:08.761170 2026] [security2:error] [pid 20831:tid 20831] [client 45.132.187.53:19903] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||periodthreads.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "periodthreads.com"] [uri "/smartdoll/SmD-dressing/index.htm"] [unique_id "auFuXHi8uvrILbZNdTRSzwAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-21 21:26:32
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210350) triggered by 45.132.187.53 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 17:26:27.987921 2026] [security2:error] [pid 14604:tid 14604] [client 45.132.187.53:24447] M ...
show more
(mod_security) mod_security (id:210350) triggered by 45.132.187.53 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 17:26:27.987921 2026] [security2:error] [pid 14604:tid 14604] [client 45.132.187.53:24447] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.somuchtoread.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.somuchtoread.com"] [uri "/2025.php"] [unique_id "atkuA98soEdJshs48qv6OAAAACw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-02-06 05:04:34
UTC ·
(9 months ago)
"POST /xmlrpc.php HTTP/1.1"
Hacking
Web App Attack
🇩🇪
Packets-Decreaser.NET
2025-12-10 14:34:41
UTC ·
(11 months ago)
Incoming Layer 7 Flood Detected
DDoS Attack
Web Spam
🇫🇷
pm33
2025-10-31 03:08:21
UTC ·
(1 year ago)
Wordpress login attempts
Brute-Force
2025-10-31 01:57:24
UTC ·
(1 year ago)
Failed Wordpress login
Hacking
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2025-10-29 17:57:18
UTC ·
(1 year ago)
(mod_security) mod_security (id:225170) triggered by 45.132.187.53 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 29 13:57:12.645044 2025] [security2:error] [pid 10437:tid 10437] [client 45.132.187.53:23441] M ...
show more
(mod_security) mod_security (id:225170) triggered by 45.132.187.53 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 29 13:57:12.645044 2025] [security2:error] [pid 10437:tid 10437] [client 45.132.187.53:23441] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.billymitchell.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.billymitchell.com"] [uri "/wordpress/wp-json/wp/v2/users"] [unique_id "aQJVeMZg3zhT87zEhJPePgAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-10-28 23:01:11
UTC ·
(1 year ago)
(mod_security) mod_security (id:225170) triggered by 45.132.187.53 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 28 19:01:04.671658 2025] [security2:error] [pid 4792:tid 4792] [client 45.132.187.53:33967] Mod ...
show more
(mod_security) mod_security (id:225170) triggered by 45.132.187.53 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 28 19:01:04.671658 2025] [security2:error] [pid 4792:tid 4792] [client 45.132.187.53:33967] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||wave94.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "wave94.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aQFLMJFZmVtx1n_wG5nnSwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-10-28 10:28:56
UTC ·
(1 year ago)
(mod_security) mod_security (id:225170) triggered by 45.132.187.53 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 28 06:28:51.265300 2025] [security2:error] [pid 28433:tid 28433] [client 45.132.187.53:43911] M ...
show more
(mod_security) mod_security (id:225170) triggered by 45.132.187.53 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 28 06:28:51.265300 2025] [security2:error] [pid 28433:tid 28433] [client 45.132.187.53:43911] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||insidepublications.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "insidepublications.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aQCa4_7mIfSZCxMVMC-abwAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
nowyouknow
2025-07-18 20:49:38
UTC ·
(1 year ago)
(From [email protected] ) We have hacked your website https://drgavingrant.com and extracted your databases.
How did this happen?
Our team has found a vulnerability within your site that we were able to exploit. After finding the vulnerabi ...
show more
(From [email protected] ) We have hacked your website https://drgavingrant.com and extracted your databases.
How did this happen?
Our team has found a vulnerability within your site that we were able to exploit. After finding the vulnerability we were able to get your database credentials and extract your entire database and move the information to an offshore server.
What does this mean?
We will systematically go through a series of steps of totally damaging your reputation. First your database will be leaked or sold to the highest bidder which they will use with whatever their intentions are. Next if there are e-mails found they will be e-mailed that their information has been sold or leaked and your site https://drgavingrant.com was at fault thusly damaging your reputation and having angry customers/associates with whatever angry customers/associates do. Lastly any links that you have indexed in the search engines will be de-indexed based off of blackhat techniques that we used in the past
show less
Phishing
Web Spam
2025-02-13 23:29:17
UTC ·
(1 year ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
